VIM/S905x: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000038

[张 宁]

hi, maintainers

domain-0 init dvfs: [    8.795381] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000038
[    8.798761] Mem abort info:
[    8.801473]   ESR = 0x96000004
[    8.804466]   EC = 0x25: DABT (current EL), IL = 32 bits
[    8.809760]   SET = 0, FnV = 0
[    8.812772]   EA = 0, S1PTW = 0
[    8.815831]   FSC = 0x04: level 0 translation fault
[    8.820700] Data abort info:
[    8.823508]   ISV = 0, ISS = 0x00000004
[    8.827332]   CM = 0, WnR = 0
[    8.830269] user pgtable: 4k pages, 48-bit VAs, pgdp=000000007d355000
[    8.836651] [0000000000000038] pgd=0000000000000000, p4d=0000000000000000
[    8.843378] Internal error: Oops: 96000004 [#1] SMP
[    8.848179] Modules linked in: scpi_hwmon(+) clk_scpi(+) evdev sha512_generic sha512_arm64 ghash_ce gf128mul drbg sha2_ce governor_simpleondemand sha256_arm64 ansi_cprng meson_drm sha1_ce ir_nec_decoder lima gpu_sched aes_neon_bs snd_soc_meson_gx_sound_card snd_soc_meson_aiu snd_soc_meson_card_utils drm_shmem_helper drm_cma_helper snd_soc_meson_codec_glue snd_soc_core ecdh_generic(+) rfkill ecc rc_khadas aes_neon_blk platform_mhu snd_pcm_dmaengine meson_dw_hdmi meson_canvas meson_ir sunrpc meson_rng snd_pcm rng_core dw_hdmi cec snd_timer aes_ce_blk rc_core aes_ce_cipher snd amlogic_gxl_crypto meson_saradc soundcore pwm_meson meson_gxbb_wdt crypto_engine nvmem_meson_efuse display_connector leds_pwm drm_kms_helper binfmt_misc drm fuse configfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic meson_gxl xhci_plat_hcd dwmac_generic xhci_hcd dwmac_meson8b stmmac_platform stmmac dwc2 dwc3 pcs_xpcs phylink udc_core mdio_mux_mmioreg mdio_mux usbcore ulpi of_mdio fixed_phy
[    8.848453]  fwnode_mdio ptp libphy pps_core meson_gx_mmc dwc3_meson_g12a crct10dif_ce crct10dif_common clk_pwm roles usb_common rtc_meson_vrtc i2c_meson arm_scpi fixed adc_keys industrialio
[    8.951167] CPU: 3 PID: 260 Comm: systemd-udevd Not tainted 5.18.0-2-arm64 #1  Debian 5.18.5-1
[    8.959698] Hardware name: Khadas VIM (DT)
[    8.963750] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[    8.970649] pc : scpi_dvfs_recalc_rate+0x4c/0x6c [clk_scpi]
[    8.976169] lr : __clk_register+0x4b0/0x844
[    8.980308] sp : ffff800008533790
[    8.983585] x29: ffff800008533790 x28: ffffac72df32b060 x27: 0000000000000000
[    8.990659] x26: ffff6e024c1cea88 x25: 0000000000000000 x24: ffff6e02bfbe96b0
[    8.997732] x23: ffff6e024c1cea88 x22: ffff6e024354ae80 x21: 0000000000000000
[    9.004804] x20: ffff6e024354a180 x19: ffff6e024c131200 x18: ffffffffffffffff
[    9.011876] x17: 000000000f9f5ab2 x16: ffffac734fa06300 x15: 000000000003fe00
[    9.018949] x14: 000000000003b000 x13: 0000000000000000 x12: ffffac734fc96440
[    9.026022] x11: ffffac735082eba0 x10: ffffc18ef3815278 x9 : ffffac72ded28890
[    9.033094] x8 : 0101010101010101 x7 : ffffc18f6f7b7000 x6 : 000000001a327914
[    9.040166] x5 : 00ffffffffffffff x4 : 0000000000000000 x3 : 0000000000000000
[    9.047239] x2 : 0000000000000000 x1 : 0000000000000010 x0 : 0000000000000028
[    9.054313] Call trace:
[    9.056725]  scpi_dvfs_recalc_rate+0x4c/0x6c [clk_scpi]
[    9.061902]  devm_clk_hw_register+0x68/0xe4
[    9.066041]  scpi_clocks_probe+0x1d8/0x3f4 [clk_scpi]
[    9.071044]  platform_probe+0x74/0xf0
[    9.074665]  really_probe+0x184/0x3d0
[    9.078288]  __driver_probe_device+0x11c/0x190
[    9.082687]  driver_probe_device+0x44/0xf4
[    9.086741]  __driver_attach+0xd8/0x1f0
[    9.090536]  bus_for_each_dev+0x7c/0xe0
[    9.094330]  driver_attach+0x30/0x40
[    9.097866]  bus_add_driver+0x154/0x240
[    9.101662]  driver_register+0x84/0x140
[    9.105457]  __platform_driver_register+0x34/0x40
[    9.110114]  scpi_clocks_driver_init+0x2c/0x1000 [clk_scpi]
[    9.115635]  do_one_initcall+0x50/0x240
[    9.119429]  do_init_module+0x50/0x260
[    9.123138]  load_module+0x23a8/0x2800
[    9.126847]  __do_sys_finit_module+0xac/0x130
[    9.131160]  __arm64_sys_finit_module+0x2c/0x40
[    9.135645]  invoke_syscall+0x50/0x120
[    9.139353]  el0_svc_common.constprop.0+0xdc/0x100
[    9.144097]  do_el0_svc+0x34/0xa0
[    9.147374]  el0_svc+0x3c/0x100
[    9.150479]  el0t_64_sync_handler+0xa4/0x130
[    9.154706]  el0t_64_sync+0x18c/0x190
[    9.158333] Code: f9400bf3 f9400421 a8c27bfd d50323bf (b8606820) 
[    9.164370] ---[ end trace 0000000000000000 ]---

kernel:
uname -a
Linux VIM 5.18.0-2-arm64 #1 SMP Debian 5.18.5-1 (2022-06-16) aarch64 GNU/Linux

dtbo:

/dts-v1/;
/plugin/;
/ {
    fragment at 0 {
        target-path = "/reserved-memory/linux,cma";
        __overlay__ {
            size = <0x0 0x38000000>;
        };
    };
    fragment at 1 {
        target-path = "/soc/bus at c8100000";
        __overlay__ {
            #address-cells = <2>;
            #size-cells = <2>;
            rtc at a8 {
                compatible = "amlogic,meson-vrtc";
                reg = <0x0 0x000a8 0x0 0x4>;
            };
        };
    };
};

it's not 100% crash. about 1/3 or less.